Add option to api requests to ignore unauthorized responses (by passing the previously automatic triggering of the oauth login flow). Update users.changePassword to use new option.